-
-
Notifications
You must be signed in to change notification settings - Fork 774
Pull requests: SasanLabs/VulnerableApp
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
feat: add a secure open redirect level that never takes a URL (#403)
#793
opened Sep 9, 2026 by
vianbas
Member
Loading…
feat: add two secure FileUpload implementations
#783
opened Sep 2, 2026 by
pereiravp
Member
Loading…
feat: add Insecure Deserialization vulnerability module
#781
opened Aug 30, 2026 by
pereiravp
Member
Loading…
5 tasks done
Add CSRF vulnerability lab with 5 challenge levels
#758
opened Aug 15, 2026 by
mmustafasenoglu
Loading…
Enhance vulnerability descriptions with Source, Solution, and Reference (Fixes #89)
no-pr-activity
#735
opened Aug 12, 2026 by
MixhizoR
Contributor
Loading…
Add challenge mode for Path Traversal (#560), XSS (#562), and XXE (#563)
no-pr-activity
#710
opened Jul 23, 2026 by
Mubashir78
Contributor
Loading…
feat: add challenge mode to Error-Based and Union-Based SQL Injection
#708
opened Jul 23, 2026 by
Mubashir78
Contributor
Loading…
Add Challenge mode to JWT Vulnerability (#557)
no-pr-activity
#688
opened Jul 6, 2026 by
Lalatenduswain
Loading…
Added ChallengeCard annotation to LDAPInjectionVulnerability.java and corresponding message keys to messages.properties
no-pr-activity
#672
opened Jun 20, 2026 by
An16og
Contributor
Loading…
feat: Add Email Header Injection vulnerability module (#651)
no-pr-activity
#655
opened Jun 10, 2026 by
atharv01h
Loading…
Implement Level 6 (UUID) and Level 7 (REST Update) for IDOR #512
no-pr-activity
#628
opened May 21, 2026 by
anatolii-kandiuk
Loading…
remediate: fix SAST scanner mappings and add validation test
no-pr-activity
#608
opened May 9, 2026 by
Etoile-Bleu
Contributor
•
Draft
Add GraphQL Authorization & Access Control vulnerability category (#530)
no-pr-activity
#598
opened Apr 24, 2026 by
zhouchristopher
Loading…
feat: add WebSocket security vulnerability module (Issue #527)
no-pr-activity
#597
opened Apr 24, 2026 by
cisaula
Loading…
Enhancement: Comprehensive NoSQL Injection Module (Levels 1-6)
no-pr-activity
#537
opened Mar 19, 2026 by
MohammedGhallab
Loading…
Feat: Implement LLM Injection Vulnerability (Issue #500)
no-pr-activity
#503
opened Feb 19, 2026 by
subhamkumarr
Contributor
Loading…
Feat: Add NoSQL Injection Vulnerability Level 1
no-pr-activity
#502
opened Feb 16, 2026 by
subhamkumarr
Contributor
Loading…
XSS Security Implementation and Ongoing SQL Injection Hardening
no-pr-activity
#481
opened Feb 7, 2025 by
LyesRocker
Loading…
SQL test expected issue file fix
no-pr-activity
#472
opened Jul 23, 2024 by
SampathKumarAmex
Contributor
Loading…
XSS Reflected and XXE Vulnerability Changes
no-pr-activity
#432
opened Feb 15, 2023 by
Prince-1110
Loading…
ProTip!
Follow long discussions with comments:>50.